Email and impersonation protection
- SPF, DKIM, and DMARC
- Observable impersonation and lookalike-domain exposure
- Mailbox forwarding and rule evidence when included in scope
Independent small-business security assessment
Know what is protecting your business–and what still needs attention.
The Business Security Baseline independently verifies essential controls and gives leadership a concise, evidence-backed plan for addressing the gaps.
$1,995
Fixed price for businesses with up to 10 users. Businesses with more than 10 users receive a confirmed price after a short scoping conversation.
What it answers
Are the essential safeguards protecting our business actually working?
We examine the observed configuration and available evidence, then separate verified safeguards from gaps and assumptions.
Microsoft 365 identity and access
- MFA and legacy authentication
- Administrator and sign-in protections
- External sharing and audit logging
Devices, backups, and monitoring
- Endpoint-protection evidence
- Patch-management evidence
- Backup testing and available logging evidence
Business readiness
- Incident-response planning
- Cyber-insurance evidence
- Customer or vendor security requests
What you receive
A decision brief for leadership. Evidence for the technical team.
Executive Security Decision Brief
A concise bottom line, controls working, gaps requiring attention, items not verified, and the first three actions.
Technical Evidence Appendix
Observed state, evidence, expected state, recommended correction, and a verification method for your provider.
Leadership Readout
A 45-minute conversation focused on what is working, what matters first, and who should address each item.
How it works
Low disruption. Clear end state.
Confirm scope
A short conversation confirms the business, systems, evidence sources, and price.
Collect evidence
We use public observation, read-only evidence, configuration exports, screenshots, or documentation supplied by you or your provider.
Verify and prioritize
Controls are classified as Working, Needs Attention, or Not Verified.
Read out the decision
You receive the executive conclusion, technical appendix, and first three recommended actions.
Fixed scope